Privacy Policy

The short version

We collect what we need to run your service and nothing exotic: your contact details, your business information, your billing status (never your card number — Stripe holds that), and the content you give us to publish. We don’t sell data. We don’t run creepy ad trackers. When you leave, you can take your data with you.

What we collect, and why

Contact and account details (name, email, phone, business info) — to run your account and reach you.

Billing status via Stripe — Stripe processes payments; we store references (plan, status, invoice history), never card numbers.

Content you provide (photos, copy, business facts) — to build and operate your website and marketing. You’re responsible for having the rights and consents for what you upload.

Leads and messages that arrive through your website’s forms — collected on your behalf, delivered to you, and processed by us only to provide the service.

Basic analytics on our own site — page views and form submissions, to know what’s working. No cross-site ad tracking.

Visitors to client websites

We host and operate websites for our clients. Information a visitor submits on a client’s site (for example, a contact form) belongs to that client — we process it on their behalf to deliver it and power their tools, and we don’t use it for anything else.

Who processes data for us

We use established providers to run the service, each bound by their own security terms: Vercel (hosting), Supabase (database), Stripe (payments), Clerk (login), Resend (email), Twilio (SMS, where enabled), Zernio (social publishing, where enabled), Railway and cloud providers (infrastructure), and AI providers (content generation — business facts like names and prices are inserted by our system, not fed to models for training).

We share data with no one else except when the law requires it.

Health information — a clear line

Our standard plans are not designed for protected health information (PHI), and you should not submit it through standard-plan forms. Healthcare practices that need PHI handling get it only under a signed Business Associate Agreement as part of a Platform engagement, with the dedicated compliance infrastructure that deserves.

Retention, your rights, and choices

We keep account data while your account is active and for a reasonable period afterward for legal and billing records. Ask us and we’ll export your data, correct it, or delete what we’re not legally required to keep — email ken@kagelmt.com and it happens.

Every marketing email we send has a working unsubscribe. Text STOP to any SMS and it stops.

Changes and contact

If this policy materially changes, we’ll email account holders before the change applies. Questions: ken@kagelmt.com. Mountaintop is a product of Kage Lmt, USA.